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(.54; USER AUTHENTICATION METHOD FOR CLIENT SERVER SYSTEM WORKING IN WWW 
ENVIRONMENT 

(57)Abstract: 

PROBLEM TO BE SOLVED: To assure that the 
instruction given from a logical address is identical with 
the instruction given from a norma! user. 
SOLUTION: In a client, server system which works in a 
WWWCwortd wide web) environment, the assignment of a 
iogicai address and an HTMLlhypertext mark-up 
language) screen having the re-authentication 
information that, can be used by only the iogicai address 
are sent to a client computer A after the user 
authentication is confirmed by a WWW server I after a 
connection request is given from the computer A. When 
the HTML screen is received from the computer A via 
the iogicai address, it's confirmed whether the re- 
authentication information added to the HTML screen 
can be used by only the logical address. Then the re- 
authentication information that can be used by only the 
Iogicai address is added to the HTML screen and then 
sent when the HTML screen is sent to the computer A 
via the Sogica! address. 

* NOTICES * 

JP0 and iNPST sre not responsible for sny 
daraages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not he translated. 
Sin the drawings, any words are not translated. 



CLAIMS 



[Claim(s)3 
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[Claim l]ln a client server system which operates, under the WWW environment, a WWW server. 
When there is 3 connection request from a predetermined client computer, a iogica! address is 
assigned to the client computer after performing user authentication, Processing which transmits 
a HTML screen which attached reconfirmation certificate information which can use only the 
iogica! address to the client computer. Processing which checks whether it is the reconfirmation 
certificate information that reconfirmation certificate information given to the HTML screen can 
use only the fogies! address when a HTML screen is received from a predetermined client 
computer through a predetermined iogica! address. Processing which generates reconfirmation 
certificate information which can use onSy the iogica! address, and gives and transmits to the 
HTML screen when transmitting a HTML screen to a predetermined client, computer through a 
predetermined iogica! address. ****** — 3 user authentication method in a client server system 
which operates under the WWW environment characterized by things. 

[Claim 2]Said reconfirmation certificate information is information which Gan use only a logical 
address which permitted use first. And a user authentication method in a client server system 
which operates under the WWW environment according to claim 1 being the information on a 
HTML screen and a one to one correspondence transmitted and received through the logical 
address. 

[C!aim 3]Have specified said reconfirmation certificate information and a processing access 
permission of a user who permitted connection a WWW server, A user authentication method in a 
client server system which operates under the WWW environment according to claim 1 
characterized by restricting the user's processing access permission based on reconfirmation 
certificate information when checking reconfirmation certificate information. 
[Claim 4]ln a client server system which operates, under the WWW environment, to a WWW 
server. When there is a connection request from a predetermined client computer, a Iogica! 
address is assigned to the client computer after performing user authentication. Processing 
which transmits a HTML screen which attached reconfirmation certificate information which can 
use only the logical address to the client computer, Processing which checks whether it is the 
reconfirmation certificate information that reconfirmation certificate information given to the 
HTML screen can use only the logical address when a HTML screen is received from a 
predetermined client computer through a predetermined logical address, A medium which 
recorded a program for making processing which generates reconfirmation certificate Information 
which can use only the logical address, and gives and transmits to the HTML screen perform 
when transmitting a HTML screen to a predetermined client computer through a predetermined 
Iogica! address. 

[Translation done,] 
* NOTICES * 

JPO and INPiT are not responsible for any 
damages caused by the use of this translation. 

J .This document has been translated by computer. So the translation may not reflect the original 
precisely, 

2.**** shows the word which can not be translated. 
3in the drawings, any words are not translated. 



DETAILED DESCRIPTION 

[Detailed Description of the invention] 
10001] 

[Field of the Invention] in this invention, the user authentication method in the client server 
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system which operates under the WWW environment is started, and the user who uses the 
logical address other than the logical address especially assigned to the predetermined client 
computer can be checked continuously — it carries out. 

Therefore, it is related with the method of attesting that the command to a WWW server is a 
thing from a valid user. 

[0002] 

[Description of the Prior Art]WWW (World Wide Web), it is the information system proposed by 
Mr, Tirn8emers-Lee and others of Switzerland in 1989, and is the system it enabled it to access 
on the Internet via the hypertext containing a character, a picture, and a sound that there is no 
joint in all information. 

[0003]The client server system which operates under the WWW environment consists of a 'WWW 
server which sends the screen which consists of hypertexts, and a client computer which 
accesses the WWW server and requires predetermined processing. 

[0004]Jn WWW, HTTP (hyper text transfer protocol) Is used for the communications protocol of a 
client and a WWW server Use a markup language called HTML (hyper text markup language) for 
construction of a hypertext, and also. Languages, such as VRML (virtual reality modeling 
language) which can express real graphics, are used [ rather than j including a three-dimensional 
picture. 

[OOOSjln WWW, the screen of the hypertext which a WWW server displays can stretch a "link" on 
the specific screen of another WWW server besides a server's data own [ the ]. According to the 
function of a "link", the screen of a link destination can be called to a client computer by 
clicking with a mouse the button which stretched the link, in WWW, notation called URL (Uniform 
Resource Language; is used for specification of the data of a link destination. 
[OOOfijBy furthermore using the interface which takes cooperation with other applications from a 
WWW server called CGI (Common Gateway Interface) by WWW, Processing can be requested 
from other applications of a host computer, a database, and a server, and the result can be 
received. 

[0007]ln the client server system which operates under the above-mentioned WWW environment. 
By what the button on the screen which the user accessed the WWW server via the client 
computer and has been sent from the WWW server is pushed for (it clicks with a mouse etc.). 
The specific information (other screens) which the button shows can be accessed, or specific 
processing can be required, 

[OOOSjBy repeating the above-mentioned button grabbing, the user can process information, 
being abie to access information [ be / no difficulty ] needed out of huge information, or 
following a complicated procedure easily. 

[0009]By the account of the upper reaching to an extreme, by easy usability and flexible 
application, WWW brought about the explosive spread of the Internet, and also these days, 
brought about the so-called spread of the "intranets" which took in WWW to the computer 
system in a company. 

[OOlOjThus. WWW came to be used for the various information processing including genera! 
disposal of business affairs. However, in order to perform general disposal of business affairs, an 
authentication method strict beyond the conventional authentication method came to be 
required from a user's attestation. 

[001 1]Here, a user's authentication method in the client server system under the conventional 
WWW environment is explained using drawing 3 and drawing 4 . 

[0012jFirst. drawing 3 explains the flow of processing of the client computer in the case of 
carrying out disposal of business affairs under the WWW environment using CGI. and the outline 
between WWW servers. 

[0013jln that under the WWW environment, the user who tries to perform predetermined 
processing accesses WWW server I first with the client computer A, sends the certification 
information of user ID, a password, etc.. and he tries so that licence may be obtained. 
[0014]When the user of the accessed client computer A is accepted to be a regular user. WWW 
server 1 assigns the logical address L1 to the client computer A, and processes a command as a 
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command from a registered user from the logical address LI after it. WWW server 1 sends the 
first HTML screen to the client computer A following assignment of this logical address Li. 
[0015]Some buttons are beforehand provided in this HTML screen. 

The link to a specific screen and the command for starting specific application software are 
stuck on each button, 

[OOI6]If a user clicks the predetermined button of the above-mentioned screen with 3 mouse 
etc., a HTML screen will be sent to WWW server 1 with the information that the button was 
clicked, 

[001 7] Drawing 3 shows here the case where the HTML screen which clicked the button in which 
3 user starts predetermined application software is sent to WWW server 1 . 
[0018]As shown in drains 3, when a screen including the command which starts predetermined 
application software reaches WWW server 1 . WWW server 1 . By an interpretation and the 
generation part la of a HTML screen, a HTML screen is interpreted, the above "a command 
which starts predetermined application software" is extracted, and processing is left to CGIib. 
[00!9]CGllb returns the processing result to an interpretation and the generation part ia of a 
HTML screen, after making it process by starting the specified application software Ic. 
[0020]An interpretation and the generation part 1a of the HTML screen which received the 
processing result, incorporate a processing result, generates a HTML screen, lets the logical 
address LJ pass, and returns it to the client computer A. 

[002l]By repeating the above processing, as mentioned above, complicated processing also 
steps on a procedure, and is performed without an error, and a user can bring information very 
needed together in the client computer A. 

[0022]The screen which was able to be ordered from WWW server 1 to the client computer A by- 
work of WWW as shown in d f awing , 3 is accumulated. These screens can be switched so that a 
page may be turned over, and they can also newiy emit a command using the screen ordered 
before. 

[0023 jNow, the method of the user authentication in processing by the client server system of 
the above-mentioned conventional WWW environment is explained below using drawing 4 . 
[0024]As the part was already explained in above-mentioned drawing 3, the client computer A 
accesses a WWW server first (Step S300). 

[0025]After connecting with a WWW server, a user transmits the user authentication information 
of ID. a password, etc, to a WWW server via the client computer A (Step S310). 
[0026jln the WWW server side, when it checks whether you are a regular user and the 
certification information transmitted from the client computer A is accepted to be transmission 
from a regular user with a registration table etc., logical address L is assigned to the client 
computer A (Step S320), 

[0027]Logical address L is an address of the connected client computer A which was seen from 
the WWW server. This logical address L corresponds with the IP address etc. of the client 
computer connected via a table called the table for address administration. Logical address L is 
assigned to the client computer which it was maintained between one connection of the client 
computer A, and cleared the correspondence relation with the client computer A which 
connection ends, and was connected to the next. 

[0028]After assigning logical address L to the client computer A. a WWW server processes the 
command from logical address L as a command from a regular user (Step S330). That is. after 
assignment of logical address L is processed as a command from a regular user, without 
checking especially a user's certification information, if it is the command from logical address L. 
[0029jThus, after processing a series of commands and communication is completed, a WWW 
server clears assignment of logical address L to the client computer A (Step S340). 
[0030]Next, when other client computers 8 access a WWW server, after checking the 
certification information of the client computer B, logical address L is assigned (Step S350), and 
processing of the above-mentioned steps S330-S340 is repeated (Step S360), 
[0031]The above is a user authentication method in the client server system which operates 
under the conventional WWW environment. 



ffiM«ii:file://P:\aetive\^^ 2010/01/12 



JP-A-HJO-124459 



Page 5 of 12 



[0032] 

[Problem(s) to be Solved by the InventionjHowever. in the conventional user authentication 
method in the client server system which operates under the above-mentioned WWW 
environment. It was not able to prevent that a regular user performs processings other than the 
processing permitted, or processing by those who are not regular users becoming a regular user 
and clearing up. 

[0033]Nameiy. a user authentication method [ in / as already explained / the client server 
system under the conventional WWW environment ], After the first user authentication was 
regarding and processing the command from the registered user who already attested the 
command from a logical address assigned to the user's client computer. 

[0034]That is, the once assigned command from a "logical address" was processed by the WWW 
server, without being restricted in any way. 

[0035]For this reason, the regular user who received assignment of the logical address could 
access to any data of that WWW server, and was able to perform processing by any application 

software. 

[0036]When assigned to the client computer A with a certain logical address LI, The means of 
the client computer B indicating the IP address of the client computer A in a URL sentence was 
able to perform various processings and data accesses to the client computer A to the WWW 
server through spoofing and the logical address LI . 
[0037]Now, it was very Inconvenient on disposal of business affairs. 

[0038]Out of the information which is scattered to the network in the world, WWW in the Internet 
accesses information needed easily, and aims at the ability to order to its own computer 
convenient. For this reason, any users enable It to access various information freely 
fundamentally. 

[0039jOn the other hand, supposing it can carry out processings and data accesses with an 
arbitrary user who has accessed the WWW server as mentioned above in disposal of business 
affairs. For example, the file the user is to be able to update is updated, or the user acquires and 
does the data which must, be made secret to the user, and inconvenience, such as relaxation, 
arises. 

[0040]Since the Inaccurate user turned into a registered user, cleared up and the WWW server 
was accessed as mentioned above, it might alter, and the external person might acquire data and 
was very inconvenient as a client server system for disposal of business affairs. 
[004l]Then, in the client server system for disposal of business affairs in which the issue which 
is going to solve this invention took in WWW, Providing the user authentication method which can 
restrict the file which guarantees that it is the command from a regular user attested at the 
beginning, and can access it further according to the user, and application software has the 
command from the logical address under one connection 
[0042] 

[Means for Solving the Problem] "A user authentication method in a client server system which 
operates under the WWW environment" concerning this application claim 1, In a client server 
system which operates, under the WWW environment, a WWW server. "When there is a connection 
request from a predetermined client computer, a logical address is assigned to the client 
computer after performing user authentication, Processing which transmits a HTML screen 
which attached reconfirmation certificate information which can use only the logical address to 
the client computer. Processing which checks whether it is the reconfirmation certificate 
information that reconfirmation certificate information given to the HTML screen can use only 
the logical address when a HTML screen is received from a predetermined client computer 
through a predetermined logical address. When transmitting a HTML screen to a predetermined 
client computer through a predetermined logical address, processing which generates 
reconfirmation certificate information which can use only the logical address, and gives and 
transmits to the HTML screen is performed. 

[0043j"A user authentication method in a client server system which operates un^ar the WWW 
environment" concerning this application claim 2. in a method of above-mentioned claim 1 , said 
reconfirmation certificate information Is characterized by being the information which can use 
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only a logical address which permitted use first, and being the information on a HTML screen and 

a one to one correspondence transmitted and received through the logical address. 

[0044]" A user authentication method in a client server system which operates un^ar the WWW 

environment" concerning this application ciaim 3. In a method of above-mentioned claim I, said 

reconfirmation certificate information has specified a processing access permission of a user 

who permitted connection, and a WWW server restricts the user's processing access permission 

based on reconfirmation certificate information, when checking reconfirmation certificate 

information. 

(00453 

[Embodiment of the invention]Next. an embodiment of the invention is described below. Draw ing 
j I sSigws notionaily the processing of the client server system of the WWW environment and the 
situation of a data access which took in the user authentication method of this invention. 
[004C]As shown in drawing J.. WWW server 1 of this client server system has the reconfirmation 
certificate information check generation part 2 besides an interpretation and the generation part 
la of a HTML screen, CGI lb, and the application software 1c. 

[0047]The reconfirmation certificate information check generation part 2 is an information 
processing portion which checks the "reconfirmation certificate information" which generated 
the "reconfirmation certificate information" explained later, or was given to the HTML screen. 
The reconfirmation certificate information check generation part 2. is realizable by CPU of WWW 
server 1 controlled by the program Although the reconfirmation certificate information check 
generation part 2 is expressed with drawing 1 like the independent portion, it is good also as one 
function of CGI 1b at it. 

[0048] Actually, although the reconfirmation certificate information check generation part 2 Is 
checked combining "reconfirmation certificate information" and logical address L to which the 
HTML screen has been sent, it is made into what is said on account of explanation "a check of 
reconfirmation certificate information." 

[0049]Next. processing by the client server system of drawing J is explained, and the above 
"reconfirmation certificate information" is collectively explained in it. 

[0050]As shown in drawing 1 . the user who tries to perform predetermined processing accesses 
WWW server i with the client computer A. sends the certification information of user ID, a 
password, etc. first, and obtains licence. 

[0051 ]WWW server 1 checks whether you are a user with the regular user by comparing with the 
user table etc, which are not illustrated. 

[0052]When the user of the client computer A which tried access is accepted to be a registered 
user. WWW server 1. The logical address L1 Is assigned to the client computer A, and by the 
reconfirmation certificate information check generation part 2, "reconfirmation certificate 
information" is generated, the above ' reconfirmation certificate information" is given to the 
HTML screen of the beginning for the beginning of using, and it transmits to the client computer 
A. 

[0053]Whcn again sent from the client computer A, as long as the above "reconfirmation 
certificate information" can recognize that the information gives a HTML screen previously and 
sends to the same logical address LI . It may be arbitrary. 

[0054]In order to make reconfirmation certificate information still more useful, in this 
embodiment User authentication information. What enciphered information, including the serial 

number (1, 2, , n) etc. which show whether it is what was given to the HTML screen sent to 

eye which watch from the application software 1c and WWW server 1 which the user can access, 
3nd which can be filed and processed, is made into reconfirmation certificate Information. When 
the screen which attached the above-mentioned reconfirmation certificate information which 
reconfirmation certificate information is fixed to the attached HTML screen, and is transmitted 
and received with the HTML screen Is sent to the client computer A. a user. Looking at a HTML 
screen on the client computer A, the button on a screen is chosen and it clicks with a mouse. 
[0055|For example, supposing it clicks with a mouse the button in which a user starts the 
predetermined application software 1c, both the HTML screen's (having been displayed [ and ] as 
"starting CGI directions" by oVswi[lg.J.) with the information on the clicked button, 
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reconfirmation certificate information, etc. will be sent to WWW server \ . 

[0056jlf the HTML screen which the above-mentioned user operated reaches WWW server 1, in 
WWW server 1. an interpretation and the generation part 1a of a HTML screen will interpret the 
HTML screen, and will extract a user's operation and reconfirmation certificate Information. 
[005 "^Reconfirmation certificate information is sent, to the reconfirmation certificate information 
check generation part 2. The reconfirmation certificate information check generation part. 2 
checks whether it. is the reconfirmation certificate information given to the HTML, screen which 
reconfirmation certificate information transmits and receives through the logical address L1. If 
language is changed, the reconfirmation certificate information check generation part 2 will check 
whether the both sides of the logical address L i and reconfirmation certificate information show 
the HTML screen from a registered user's client computer A attested first. 
[0058]Since reconfirmation certificate information changes with above-mentioned checks even if 
a third party sends a HTML screen through the logical address L1 using other client computers 
8, processing beyond it is refused. 

[0059]On the other hand, the command attached and sent to the HTML screen by the 
reconfirmation certificate information check generation part 2 when reconfirmation certificate 
information is able to check with the right is processed. 

[00C0]Here, when it includes the user's authority information in reconfirmation certificate 
information like tins embodiment and reconfirmation certificate information is checked, 
restriction can be applied to the data which the user can process and which can be programmed 
and accessed. 

[006l]For example, reconfirmation certificate Information can prescribe the user's authority so 
that the user can access only his account. 

[006 2] By this, when the processing which the user demanded is the processing permitted to the 
user. It restricts, starting CGi directions are sent to CGI lb, the predetermined application 
software 1c operates, predetermined processing is performed, and the processed result is 
returned to CGHb. 

[0063jCGI1b sends a processing result to the reconfirmation certificate information check 
generation part 2. The reconfirmation certificate information check generation part 2 generates 
reconfirmation certificate information for the processing result. Although the first reconfirmation 
certificate information may be sufficient as this reconfirmation certificate information, let it be a 
processing result and the reconfirmation certificate information on the couple 1 preferably. 
According to this embodiment, a serial number is made to increase one time and encryption 
generation is carried out. 

[0064jNext, the above-mentioned processing result is incorporated, and by HTML, an 
interpretation and the generation part 1a of a HTML screen generate a screen, sticks the 
generated reconfirmation certificate Information on the screen, and transmits to the client 
computer A. 

[0065jBy transmitting and receiving a HTML screen as mentioned above, the user can perform 
processing which can acquire information needed and ho wishes. 

[0086jThe HTML screen which attached the reconfirmation certificate information 1 - n is 
accumulated in the client computer A by performing n transmission and reception. With the 
function of WWW, the user of the client computer A can emit a command to WWW server 1 using 
the HTML screen received in the past. 

[0067]In this embodiment, since the reconfirmation certificate information containing a serial 
number is given to each screen, with WWW server 1 , the same command of the same screen as 
the command processed in the past is detectable. In this case, a user can be told about being 
the already processed command, 

[0088]Thereby. the double processing which was not able to be prevented conventionally can be 
prevented, 

[0089]Ne>;t r a flow chart ( drawing 2 ) explains below the flow of processing of the user 
authentication method in the client server system which operates under the WWW environment 
by this invention, 

[0070]According to the method of this invention, as shown in f"av.'ng_ 2 the client computer A 
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accesses a WWW server first 'Step S100). 

[0071 jNext, the first user authentication information is transmitted to a WWW serve*" from the 
ctient computer A (Step Si 10). 

[0072]To this certification information, a WWW server checks whether you are a regular user, 
and when it. accepts as a registered user, it assigns logical address L to the client computer A 
(Step S120). 

[0073]Next, in the stage of the processing carried out via the above-mentioned logical address 
L when transmitting s HTML screen to the client computer A from a WWW server, a WWW 
server generates reconfirmation certificate information, gives this to a HTML screen, and 
transmits to the client computer A (Step S i 30). 

[007<4]On the other hand, when transmitting a HTML screen to a WWW server from the client 
computer A ; the reconfirmation certificate information which the WWW server' generated 
previously is attached to the HTML screen, and it is transmitted to a WWW server (Step St 40). 
[0075]When a WWW server receives a HTML screen. Only when it is able to check that a WWW 
server is fogicaf address L assigned to the client computer A, and it is the reconfirmation 
certificate information given to the HTML screen of the client computer A, the command of the 
HTML screen is processed {Step SI 50). 

[0076]Processing of the above-mentioned steps Si 30-5150 !S repeated, and a user ends 
communication with a WWW server, after ending desired processing. 

[0077]A WWW server will clear assignment of a logical address, the user A. i.e., client computer, if 

the signal of the end of communication is received from a user (Step S160). 

[00783A series of above-mentioned processings are connection with one client computer, and 

processing in the meantime. Therefore, when there is next access from other client computers 

B, logical address L is assigned to the client computer B (Step SI 70), and processing of the 

above-mentioned steps S100-S180 is repeated (Step SI SO). 

[00793 

[Effect of the InventionjAccording to the "user authentication method in the client server 
system which operates under the WWW environment" of this application claim L so that clearly 
from the above-mentioned explanation a WWW server, A logical address is assigned to the client 
computer which accessed and performed user authentication, and the HTML screen which 
attached the reconfirmation certificate information which can use only the logical address is 
transmitted to a client computer through the logical address 

[OOSOjNext. when the above-mentioned HTML screen uses it and the client computer emits a 
certain demand to a WWW server. A WWW server checks whether it is the reconfirmation 
certificate information which can use only the logical address which the reconfirmation 
certificate information assigned to the client computer which performed user authentication first. 

[008l]When the above-mentioned check is affirmative, a WWW server performs required 
processing, attaches the reconfirmation certificate information which can use only the logical 
address for the HTML screen of a processing result again, and transmits to a client computer 
through the logical address. 

[0082]Thus, between a predetermined client computer and a WWW server, in an exchange of a 
series of HTML screens, the reconfirmation certificate information which can use only the client 
computer (logical address) is used without a break, and is checked in the method of this 
invention from the first user authentication. 

[0083]Even if a third party wedges himself in the logical address currently used by this and it 
emits an unjust command to a WWW server, since the third party does not have the 
reconfirmation certificate information which the WWW server generated, he can prevent 
processing of the unjust command. That is, if it is the command from a logica! address currently 
assigned conventionally, the evil which was not able to judge whether it was the command from a 
regular user is removable. 

[0084|Next, according to the "user authentication method in the client server system which 
operates under the WWW environment" concerning this application claim 2, reconfirmation 
certificate information. Since it is the information which can use only the logical address which 
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permitted use first and is the information on a HTML screen and a one to one correspondence 
transmitted and received through the logical address, it is detectable to have performed 
processing duplicate with the same HTML screen. 

[0085]The message of the purport that It is the duplicate processing can be emitted to a user by 
this, and the overlapping processing by an error can be prevented. 

[0088]According to the "user authentication method in the client server system which operates 
under the WWW environment" concerning this application claim 3, reconfirmation certificate 
information, Since a WWW server restricts a user's processing and access based on it including 
the users processing or the information on an access permission, the processing in an 
authorized user's WWW server of connection can be restricted 

[0087]Thereby, unjust processing and use of an authorized user can once be prevented for 
connection to a WWW server. 



[Translation done.] 
* NOTICES * 

JPO and INPIT are not responsible for any 
damages causes by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely, 

2.**** shows the word which can not be translated. 
3 .In the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 

[Brief Description of the Drawings] 

.l.Q:.l>'d:M..lj^ e explanatory view showing the flow of processing between the means for realizing 
"the user authentication method in the client server system which operates under the WWW 
environment" by this invention, and those means. 

[Drawing 2 J The flow chart which showed the How of processing by "the user authentication 
method in the client server system which operates under the WWW environment" by this 
invention. 

Ii2c§yi^£.J.i^ e explanatory view showing the flow of processing between the means for the 
conventional user authentication method in the client server system which operates under the 
WWW environment '. and those means. 

LQl^wiirig 4 jThe ^ ow chart which showed the flow of processing by the conventional "user 
authentication method in the client server system which operates under the WWW environment" 

[Description of Notations] 

1 WWW server 

la An interpretation and generation part of a HTML screen 
lb CGI 

1c Application software 

2 Reconfirmation certificate information check generation part 
A Client cornputer 

L Logical address 



[Translation done.] 



mluml ffk P aut\e PXiK-iUSClP^orksp.k^lOui \2-m\ MO \it-Wr D1-JPI01244 2»Ki Oi 12 



JP-A-HJO-124459 



Page 10 ofi 2 



* NOTICES * 

JPO and iNPIT are not responsible for any 
damages caused by the use of this translation, 

! This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3,in the drawings, any words are not translated. 




i wwwt 










i 













mhimi fik P aut\ e PMIOiUSOSP ^orksp.ke* !<>uj 12-351 HO \J&& D1-JPI01244 2»Ki Oi 12 



JP-A-HJO-124459 



Page 1 i of 12 



j WWW'i--/<-^ a U8E»« trim 



ii] — si io 



? y -i r y h =j v c .-t ~ ? a U „ c j on 



fcflfcU HTMLSfiS^ftLX 



^-3130 



r SS40 




{&i$r F l and «Sg!i£i*&) 



T £ t h K ? -7 -i' T V V- 



-SI60 



■ K',< - » 8 fc»«r K t' ^ L * 



-SI TO 



* fy'/S 1 0 0-3 1 



-SI 80 



mhimi fik P aut\ e PMIOiUSOSP ^orksp.ke* !<>uj 12-351 !!0\J&& D1-JP1012-44 2»10 01 12 



JP-A-HJO-124459 



Page 12 of 12 




[Translation done.] 



mhimi fik P aut\e PXnc-iUSaP^orksp.k^loui \2-m\ MO \it-Wr D1-JPI01244 2»Ki 01 12 



02) & Pi # If " 



01 ^#$11388*^ 

#ffi¥10~ 124459 



C51)IfitC].' ; 
G 0 6 F 15/dO 
13/00 

G09C 1/00 



3 3 0 
3 5 7 
6 6 0 



G 0 6 F I5/CM 
G 0 9 C J/00 



<7?jftis!# n a « hp 

#*l f ' UMK& * fiLL* i?***-*"! { 34*& 
<7^»W« ± U] « K 



1 



/\~777i4r|^T\ 

f!f^' M , *_ - ' . K 

*v; , « ^ >„ft : ^ ! - < ~> : V 

aygx—t Km T Y V 0 lis "<7 7F 

• ^ ik,', * r ^ . khi ^ i m,»j 

Hi <. , 7 ' ?if • ) 1 I 

- * » ii i v: ^ins". a 1 7 7 , in >i 
hi - « ^ *'i '^'i <'7 

7 Hf\ I i\ si M 1 ^ 7 , ,< > k " ''1 

! n< s '«c 3 - i. + 7' * j. is » j ,1, o. i u \ 
7toH T M LeiiiiliSCit t,T)M c > 
<! t . ^7\\UU7,N,J7il ; ' ' f r * 

[ < , ] » ' \\ < ! . 

^7Y77ht~/w-'77i,7.fo 

M K-?A 

[ t s Of« * i < i I 7 7.W ' 

7 > * t s'ft 1 > «K ( . 
7 ' < S M i .7 ^7* UK ' ! 

> I- - v~ „v' ? I— i ~ ' 1 , 

[ ( . n v w > t 

m<0 *7<r>h*> a * ft 

* « r * ' t "> M . ^ , ^ ' ' i 

*i ^ H . .o,. »'K 

' I'Mi.Ki i < k Kff I'll 

'lI S v. I. t ^ ^ 

f*f./« . c » / >' ' r 1 -j i 

- ^ vif t\\ iir<f t u\.t >in\i 

■t«?)H luiwm^i-ximtmmb, mt>#%> 



[0 0 0 1 ] 

iit i> ^ -7 -f 7 > j- ^■yxy-L&m&z.- 



■if-,v : - h j > > :,v, : 1 $ * : ; h d \ ^ o 

CO 0 0 2] 

Ctl^i^, ] \\\U\ t\\ „ id \\ 1 0 . We 
b) Ji, 3 9 8 9¥K.X-f\Xi0T i mS e r n e r s - 
1 < K k i .! ^^t I } fi < - Kci» > t 

, ..>,«<. ^ sh I v. 1 

[0003] wwwiit rmm - z'/y-fyyi- -9-- 

1 3 W WW-9---/^--^s ^WWWWU— M~fc7 i' t X 

[0 0 0 4] WWWTfiv :>5-r7> I^WWWt~^ 
- 1 «1«7D h 3;VK H I T P ( h y P e r sex 
t t r a n sfer p r o t o c: o 1 ,) §#Jt]T 
' , 'M / 1 ' ] ^ h"u.'t, HTM I (h 
v p e r t e x t m a r k u p 1 a n. g u ;a g 

ttOJ: 0 U7;^^->7-f '/Z««TtSVRy 
L (vi rnial real I i v mode I in 

[0005] i/t, wwww, mm~rt~tfm 
•rs/vfVs-T 1 ** hoiiMiiv ^^-M-iiii^-^ 

^»\\\\\\-«*-/wjri.L^*ti«;- o; 

5,>r a i «i j > or » ^ . 

,t u u n £; , ' i 1 K v ' f H-. 1 
[ 0 0 0 6 ] $ ^ WW Wm. C G 1 ( C o m m o n 
Gateway Interface) ii v v 5 WWW 

t-A>~frmk>T7*v >r-y a > £ § ■< 7 

' < s>\ i . J." ? ^ u: / ■- 

■9s 7--^^--x, ^-/v-cOj|y)770 7--=;/ij>'Si: 

£0f C 3 \ , h\ U'^ 3 ' f " r> 

••• 'V- :>at,!,'C7. v- ••••{.;; . ^-5Y77h37 
*f a - ^ « / r L r W W - / <-fc 7 £ -fe X t , WWW 

s ' - ' » ^ 7: L. <. " «, » 

? fc7^^xtfc0, 

* 7>,u> t , 



i s i 0 -~ 1 2 4 4 5 9 



[0 0 0 9] WWWfcX 

X i\ ^ ^ ''WV . X> - ' ^ 1 * 

- S : X"> Ai. i;^ V^X. >1->.i>o f > I- ' X " S 

v i ', t n . « f 1 < > , ^ t t 

[ 3 - < I > ^ > , J ' • 

vl-t ^ U< 4 X 'X Wit* 

L - 3 , x, ^ . \v\ \* ■ ( 

i ?■ :<x :>:wor{ * ^ ^i: l- 

5, 

[oo 5 .3 UWttrA. v»vx i(k- >'24'V-I3^ 
^ f sa»- if-ii, -t,< ^ x 7 y h 3 >' £ - * a k .i 
o, tfwww^wi- 1 fcT^-fex u a-*- r 

[0 0 1 43 WWW«t-><- I 14, T^XX/ir^X 

x ^ *vx ' "' v h \ - -i 

xi \ x ;x> £ } o, £Hi\s;vW''M ,n 

fxxu uagosricitiK www-y--^- i a, ❖ 

^•Y7>hn > e a—-? A £»JOH T M L Mm til 
[ 0 0 15] C to H T M 1, ijilfc U . ?*6v > < -3frV>$ 

/J-'^'ri-i >><4i ouroo 
f ] • * \ 
taW'C ! J -j f% t , y& >; 0 * jftfc t 

" W l Hi Ml M ;tv\\\\\^ iv 

[0 0 . - ] - _ N ^; . * •> ' ) ; 

-■ > a >- V7 h Xx7^i}tS^»X^ 0 7€L 

h t \? i > w WW ^ ' ^ ,i « V , > I 
[mo i S3 k i-iL, * l' 1 '^'- < 

' 'KM 7 -J* 3 - - f Tl ' 

. X " s , U'\ \ f f . 1 J H I 'I 3 

, w ff, C t w > jl^-, , t«' - 

#■^.1 %mtb. C 0 i 1 bid 



too i oj cg I i ua> mztiTcr-fuy-vB 

[« v ' ] t ^ ^ , > 

f - i 0 . *' , 1 t»fl 

'1, ». * * * 1 1 iK i 

[0 0 2 <\* , .t-' ^ ' , 

-f 7 > > r; y e a : s a fc a, W WW*- ' 

too 3] : .x u:-/v wwwqiix-'' - 
h ' ' i <!i c „ + i - ,*» , 

[* * 3 - < > , , i X ' , ^ 

.X-K7 7-trX-r§ (XT-y7S 3 00) , 
to 0 2 53 \\W\\^~'?~Jx^Kl -XtX\ n~*f~ 
rX XfX-fXXhrfXea-^AtfM-r, 

S f.Xr^7S 3 10), 

to 0 2 63 WWW+JwS-ttWx -?5X 7X hrfy 

,:t-XC 

2 0) a 

[0 0 2 73 » fux tii v mm-r>,~~frm 

tJt\l iX'X ' — X ^ J L > - * \. W hi X 
T ; *>S a COIIII7FXXUX 7FXXil!;]7-7 

' v • . ^ . . " • ' ! 

i sUt, v f/.: Xoir 7 \ ,. hKOliK^ 

*it^^A*i fck J ..x! j-> " - x* m; -- 
^i. >u t \-si« i" if- ^>., 'WiLv ' 

■{ j >■ h a- 5? s o it & n^,> 

[00 2 8] ?Xf7>Xn> ; fc!a A fcl«7 K I-- 

si cXf^i wnw - <t, X'h^rr- 
} l ', >x ^ f t •■*•-->/,_ 
O'S ^ ■* . > - >!• X . ' 

nxx n' i < : iAhl 'fi;j< _ 1 * n 

[0 0 2 9] XX>jc^KLT- 



(4) 



I s i 0 -~ 1 2 4 4 5 9 



i- :i >^-^ a ^mmr r ux l <of?j o $ r£*y 

7t5 (Xfy/S 3 4 0) 
[0 0 3 0] m$yjT>h-3>€x—$B 

73 ! . t '«i % t"-'^ ^ * t -3 
7}rUXlW)^r (Xf 7 7^ 3 5 0) , .hffiXr 
- S } "5 i» - s MO V„Jj»* v J < 's 

3 6 0) s 

[0 0 31] '! 1 it m\WU ^' i * *> 10 
[0 0 3 2] 

imwmwLXo ttmm ..yew 

f t \ I 1 " * 1 i > ^ j> t > 

,f ^ M ' i«N V?F f " i> 
t t ^--t- -W*' ' ,,|,."J-+ -7t<> * it 

[30 > ,] \^ hV,?HJ< ' KlU 20 

•> v7 7 7 MJ-~> ^^XfAK fttt® a 

—sf-t , t 1 ^ - ~ ^ ( f ^ B ,n 

[0 0 3 4] M ( 7 i { i>3 t" > ! * * I 
3. MW ^ 

[o (3 ] :oti> t :m~ k 7^,',^ 33 ?7 

>- , t v0 „+ „ v , ^ * , > U < A U * _ v,, • j * s „ so 
-^feT ifcfc, ^^37770 7~-7h 

77/7 h 1 i s * s ~ 7 
C 1 } - \ m ' i i ' „ » 1 . 

7 > 3 n >• {3 ;.i -- ? A *) ft T6*XTWi&*K, * 
5 •< 7 7 f- n >• fc? ^ — ? B ft U R L £i£ W-<7 > h 'J 

o, t^47>h:-iyi£::i--$ kKt^tti, mw 

r 3 -3 ^ ... , K.f -\ . i s . " 40 

ft. 

[0 0 3 83 MCfcittWWWtt* l» 

i- - , ^ r^>^ . 7 
mi : -;3-<- ''i- -'. I • SV '-c \ h ;f* n : u , - * 
ii t , ^ c'k V 
*, v ,- h r*"-*-* - th »- T * 

[i.^O '-^ \ . .\ I ' 



V,' V * "t v > — * <r ' ' T — h \> t C ! t - > + . 
yf : '.S;i;.i-'ff -- 4 o -f t tTWWW S-r. 7 ❖ t' 7. 

> r. » ■ , r^tiiff 7i > 37 > h 3. _ , \_ y -< i v01 

133 :3»33C^-^r>T3r-^7 

[{ 3 . i ] '.-.^ ■ l : j 

ii. WWW * s ^i*. (> t't *,}f ^ - ' *} 



XTrt 3 77 •1';^7 7 3 3--> 3 >V 7 h '7x 7%« 

:1'.3: 

[0 0 4 2] 

i scfls rw 

S ^ 5 ■{ 7 > h ^- } ^- 3^ X r L ?3 
i VVWQK t f *»J* j 
4/3>-f7>'h^-~^-~3'Xriaca^T, 1 
3? -f7y h37l3rr 

- M-f ■ r 

' f 

* - hi 3^it i e ^Vi^Jt \ v .m 

l mm%® *J y < 7 y h n >33 :i - * rciMt ^ 
i ' l ».^f"' ^ s w 3iU'"''' hi 
^ ^ - 'v»H t Ml f« ''3„ ,L 

PU'X» 

J r\r 3 % >.' i\^f? 'hu 

s ,,h/ fh ! , - 3>.3-> fvLf '\ '\ <{ 

- . \: - .-3 m : . - 

-SnL'i 3 ^3.3 3, 

[3^ t ..q '\UA:HX ? 5 \\ \. \\ m a'- i f 
3 t 3-3 ./ t;- Ms,..., r ... : ; xv-^^:^:?^:-;.--^-^ 
t , 1 3 < ^ i > ! < iiS £ Mn 

3-3 .7, ^ h I .'3»U .7 

3f t ,t /vH i \n«^ n -nu-v3^r c r,/.c<!:% 

t>i' O ^/3,3 >-A' \\\\\\rk *c^h 
i o -3 3? 7 7 y r t -/ ^ 7 X -7 {c ^ tt § a-^f- ;g 

J „f C,> ) ^ 1 ^ 




i s i 0 -~ 1 2 4 4 5 9 



[0 0 4 5] 



, , j i > i ^ ^ * i ft ^'..Nk 

[0 0 4 6] m I fc#f *5fc» ZMv<7y Ht- 
/^~^X-rACiWWW-y--K- j Si, HTML 

[ < 3 * • , < 

flftWVVw4--;v- } CDC P UIZ j:->X'imt^C ttf 

■k btzmv* d m& I/O CG I 1 btO 1 

lit': =VCi 

4 ^« f n , lH\ih( 'u ' i" n s 
[,> ; ; ^ .;!..*'< M*-.- 1 

[v. , : 11 .]Ki , u -o- j, !; , *' o"> » ■ -t- • ■ l _ 

X7-i V>; f <\> i> , U * "a , k 

[0 0 51] WWW-y--^- I K;L&^a~*f~ 
f - 7m t m &t 4Cfc»c«fcD % i ©a- 

t'M - >Mi 

^•Y7>hn > e a — -5* A <0a— ElSt^- If- 1 
^ U ' " v !- i x v — ' \c , ' h 

f J n 'Af j I 1 ' 

M I M * * ! 1 i 5 Ml ' 

n y\t :; . •- £ A b 31 b ftT*fc £ 1 K , € 

' >.!H\U iWJUV"! vwf ''K U [ Eli 

^ -fe XT t S ^ r < )W 11T t-ST-/y-'/->> g 



isi^ r^^^ f©H t m l mm ttt icy&mg$m 

\; '..Jio', * ,£ - i 

a— ^ A.jr.TH t u i wmzm&$>. ®m.t<o$* y 

[« 3 - . -,,t, t - > > •> ■ ' ' T . 

" (i " . t , iin #ihj. , ■" 
"f ^ »r» «k « £ u < v ^ 

, f . „ l J ; > . rhC \ 'ji firs i. t i . w \\ w > v i ;;. i\ 

[f . U . « 1 * u - ' v 

1 k"li< , WWW-9---/^- I H T 

U .--ij— ^. f^^Lr i ; ^i-i<i: i-hHr^ 

^ f 'I O » « ,^ fl I Ml *i L 

I i ^ -»\ m If* w * r \ t 

10 hi J I i « * t6 ' i N 
K-i/, -''fit . ^.,> Id I > ' 

, . *, i- ! . ^ ! : ^ > - • 

H = \ > i , k > ^ ^ vH'f , 
[0 o 6 0] ;:. : \ . 

^<Da--tr--ic ir-jg s * i fc lit * mane n f > , » 




(6) If Ptf i 0 --- 1 2 4 4 5 9 

9 10 

[0 0 6 4] \u h f \n m ^ x »v* ' ^ s t i < s . , 

' I, { i » _ > . f M v. I i f HI [ I 7 ! J ,d ? S ! > 0 \ I t >Mf 

< k \ * t « y '* i w > ll -±~*?-iz. mommr+z twww 

[0 0 C >] M * > . CP \! " v . > CO 0 7 7] WW W^- < >- *t, "i- ^ ?m||,h; 

* <". > _ ' v _ , " i: - va-\\^,; „ - * -» 

[0 0 6 6] 4fe n^«ff«H C fcMfc 0, y (Xx-yTS 16 0), 

' . ' \ <- t t ' t ^ , > > * i J- ) s L ^ . . 

l,/cHTMLii!i%^ffltTW\VW-H--/^- S Wtl/t «#f±, US!/' F UX L* ?5 ■< 7> My^-£ 8 

[o it,] {vvtf <^.t ) . ^ > o-s i e oo-^m^mmt (x-f^s i s o) <. 

t> ?£ i , f <ii . ' \WW\ « Cm , n] 

S ' ll >if '» C SI >' ^] i T , 

»J , I >v _ s 1* V *, ~ i > M»Hu| V > ' ~ Mtwi- 

I O « < ' . . f 

[0,(»0 h >t\n K'^ u ^ >^ ' i s , 'ft % M 

- • ' "> , / . -* i~ - i i^i i 'it v -3 

^ , -fi ^ 'j > >- i * ~ h u r k. I V.s 'L J , 

[0 0 7 03 it > f *». Hi \ .b,. .,1V ^ ,| .>\VW ~m~L<^ 

l^ijfC » 9 < 7 > h a >' e -i ~ A #WWW«*w -^IC j * ^ i f S ^ L 'i \WW\- % . MJ»'. f 

T»^Xt§ (Xf'^S l 0 0) , Yimw>^~*~,&j Vj; ^; s'^: I n: -.i 

[0 0 7 13 ^ - l ^ ^ ~ -^v C, t*iV F ',j^>^tfC^ { t ?, 

- ; 1 u [c ( 8 i] ^ t J "^ \,y \ , www^-.^ 

r0 0 7 2] C£0W^.^t, WWW^~.'Wi, > 'l U)H!\! H 

t ' ' ' ^ « ^ * \» A* i l C C ' v ',h . 

[ ' > i ■> 3 1 1 f ; > 'h: '. < ^ *l [,u^] . m,, v t ^ < . , 

ilol'KV U WWW* — * -i—. -M 'f/. H X - -m-^c H^f" 

-\ HI' .iis^!, HU« + ' H * *■ ~ i" ^ ! jtf«t ) 

'■^•.'iwljl Cll Hn [if i t t. <.'''} .1 "!l > > 

' v _ t 1 ! ; f t H A t K > 1 It 

3 3 0} „ eta, 

t . n . 5 j ' \ > ' £ <^ j * « ,o 

tmi i*jfrL,i 1 u.uuu«' v J ^ Ut^xi'f tr^ o>x .'..inwn^ ^ibi'-fh", 

s i 4 a ) , 3 s i- - v - j ^ ; ; • -K-cnw^ 5 

Im\i % v.ww^ ^ - r". Mr b- * )f?*;r>*^w ^ >> *'j ^ ic > 

~ I.' Li»' H MI M ' v^J t ii 50 [0 0 8 4] *4s>» '^JiV^" \UWU>^ 



II 

^ >o ,": H - s - w\* 

( O I v i ( Hi \ i urn 

_ 4 ^'w. I i'.ff H'i i*r. 

W 5 £ v Y 7 >' h X ir M: & tt S 

W W '9-- , v~ -• +r --oy'im «f> 7 £ t x .•£;%!! irf £ © 
[0 0 8 7] cmc^i), -awww^wwclsg;^ 



1 th > » > * v »} i »>* s > >, n 
[ -3 * ^ > ^ \ < i < t 

MS" ;v : v- .Y. Nr.; I- ^ H x , i \. 

[J 3 ti > \* *\ o t A .1^' '* m ' I 

[ 1 ] u . > \ \V > t U 1 * > 1 ' I- 

M^ft%>^ I- £ 7 □ -• ~r t - h * 

1 a M i\K »i op.K- ttV, , 

lh CGI 

Ic T7"U '/—i/a >' V 7 h f >.x.7 

2 Mi!ff«S*f«ii 




-T*r«asF.i»*s 

1. SWSn 



■ rft'TtJ HTM L SSS^TV^ 
[L_3j I jffi£.i£»« (2. 



IT 



I w «ii:i^cziii f 3 ow 





^.i...us.m.....j 














3-jSL. HTMLKSlCttLT 
» 7 T a y f a - » A ^HHS 



! c~>n 
1 u 




f7 — . A 




I ^ ' j MML 


H , _ /«> 




J§s|[ 







/SI 40 



WWf — -Pf IBSEtt & & ft I R: 



<Si50 



ttar k ^ * <p» b s x % ^ »; :r 



* - * b tjftsr k u x l t 



-SI 70 



-SI80 



